1.- Data protection policy

This data protection policy is applicable to all processing of personal data carried out by the data controller, both through the website www.groupsalto.com and for all other processing.

Therefore, before providing us with personal data, it is essential that you are aware of our data protection policy.

If you have any doubts about our data protection policy, please contact us at the following e-mail address: lopd@esalto.es

The user declares that he/she has been informed of this personal data protection policy, accepting the processing of personal data by the data controller for the purposes described.

The applicable regulations are as follows:

a.- RGPD: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of natural persons.

b.- LOPDGDD: Organic Law 3/2018, of 5 December Organic Law on the Protection of Personal Data and Guarantee of Digital Rights.

c.- LSSI: Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce.

2.- The identity of the data controller

The co-responsible for the treatment are Electronica Salto, SLU, with CIF B25317827, address in Torregrossa street Lleida, number 60, C.P. 25141, telephone 973205854, email lopd@esalto.es , registered in the Mercantile Register of Lleida, volume 280, folio 152.

And It Saltó, SLU, with CIF B25766304, address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854, e-mail lopd@esalto.es , registered in the Mercantile Register of Lleida, volume 1356, folio 44.

3.- Contact details of the data protection officer

The User may contact the Data Protection Delegate at the following address lopd@esalto.es  or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

4.- Processing of personal data

The following is a description of the processing of personal data that we carry out as data controllers.

a.- Clients

Identity of the co-responsible parties: Electronica Saltó, SLU with address in Torregrossa, calle Lleida, number 60, C.P. 25141, telephone 973205854 and e-mail lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and e-mail lopd@esalto.es.

Data Protection Delegate: The User may contact the Data Protection Delegate via the following email address lopd@esalto.es or by writing to the address of the responsible party for the attention of the “Data Protection Delegate”.

The purpose of the processing: To establish and execute the legal relationship with the client related to the contracted services or products, the fulfilment of legal, accounting, fiscal and all other obligations related or linked to the established legal relationship, to answer their doubts or questions and for the management, control, administration, extension, execution and improvement of the relationship.

The legitimacy of the processing: The execution of a contract and the consent or legitimate interest of the data controller, in the case of processing for advertising purposes or automated decisions.

The data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

The recipients: In general, the data controller will not pass on personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with such data processors, and with which the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

b.- Potential customers

Identity of the co-responsible parties: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and e-mail lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and e-mail lopd@esalto.es.

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the Data Protection Delegate for the attention of the “Delegado de Protección de Datos”.

The purpose of the processing: Your personal data will be processed for the purpose of answering your queries or questions arising from your contact with the data controller.

The legitimacy of the processing: The performance of a contract and the consent or legitimate interest of the data controller, in the case of processing for advertising purposes, profiling or automated decisions.

The data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

The recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be restricted, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

c.- Contacts through the web form

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing: to deal with the user’s queries and requests for contact received through the website, to manage the service requested and to respond to them.

The legitimacy of the processing: the consent given by the user to the data controller by clicking on the corresponding box.

The data collected: name, telephone number, email address, query, IP address, operating system and duration of the visit.

The recipients: In general, the data controller will not pass on personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with such data processors, and with which the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

d.- Providers

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing: To establish and execute the legal relationship related to the services or products contracted with the supplier, the fulfilment of legal, accounting, fiscal and all other obligations related or linked to the established legal relationship, to answer your doubts or questions and for the management, control, administration, extension, execution and improvement of the relationship.

The legitimacy of the processing: The execution of a contract and consent, in the case of processing for advertising purposes.

The data collected: Name, surname, ID card number, professional contact address, e-mail address, VAT number.

The recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

e.- Social networks

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing: registration and monitoring of the corporate accounts of the social networks of the data controller.

The legitimacy of the processing: the consent given by the user when registering on the social network.

The data collected: the personal data provided by the user or the social network when becoming a follower of the same, such as name, surname, ID number, address, email address and contact telephone number.

Recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the interested party.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

f.- Human resources

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing: Management of the employment relationship with employees.

The legitimacy of the processing: The execution of a contract.

The data collected: Name, ID card number, social security number, address, e-mail address, telephone/mobile phone, marital status, date and place of birth, age, sex, nationality, bank account, profession, experience, training and skills.

Recipients: In general, the controller will not pass on personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

g.- Personnel selection

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing: management of the data subject’s application to the published selection processes, or to other vacancies in line with his/her professional profile that may arise in the future within the activities of the data controller.

Legitimacy of the processing: provision of the data subject’s consent for registration in the personnel selection service.

The data collected: name, surname, telephone number, e-mail, CV, cover letter and any other personal data associated with the curriculum or professional profile.

The recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

h.- Video security

Identity of the correspondents: Electronica Saltó, SLU with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es and It Saltó, SLU, with address in Torregrossa, street Lleida, number 60, C.P. 25141, telephone 973205854 and email lopd@esalto.es

Data Protection Delegate: The User may contact the Data Protection Delegate via the following e-mail address lopd@esalto.es or by writing to the address of the data controller for the attention of the “Data Protection Delegate”.

The purpose of the processing:

To ensure the security of persons, goods and facilities.

Compliance with emergency plans

Use of video surveillance as a means of company control of both the access and presence of the worker in the workplace, as well as to verify compliance with their work obligations and duties.

Legitimisation of the processing: Legitimate interest.

The data collected: Images.

The recipients: In general, the data controller will not transfer personal data to third parties, unless there is a legal obligation or we have the express consent of the data subject.

Specifically, personal data may be transferred to:

a.- Public Administrations, Judges and Courts for compliance with the legal obligations to which the data controller is subject due to its activity.

b.- To financial institutions for the fulfilment of the obligations arising from the contract between the data controller and the data subject.

c.- To third parties in all those cases in which it is necessary for the development, fulfilment, execution and control of the contract between the data controller and the data subject.

d.- To data processors, access which in no case shall entail a transfer of data, when access to personal data is necessary for the provision of the services that the data controller has contracted with said processors, and with whom the data controller has signed a data processor contract.

Retention periods: the data controller will process personal data only for the time necessary to carry out the purposes for which they were collected, as long as the consent granted is not revoked. Once the relationship has ended, the information will be kept blocked for the legally established periods that are necessary for the formulation, exercise or defence of possible claims and will subsequently be deleted, unless there is a cause for retention.

Rights: The data subject may exercise the rights of access, rectification, erasure, to request that the processing of their personal data be limited, to object to the processing, to request portability, to not be subject to profiling or automated individual decisions and to revoke the consent given without retroactive effect, by sending a written communication to the address of the data controller, providing the ID card or official document accrediting the identity of the data subject, indicating the request or right being exercised.

The data subject may file a complaint with the Spanish Data Protection Agency via the website www.aepd.es.

i.- e-mail legal notice

This message and its attachments are addressed exclusively to the addressee and contain confidential information. If you are not the addressee, if you have received it by mistake or if you are not authorised, please be aware that you may not read, copy, save, divulge or make use of it, and we therefore ask you to notify us as soon as possible at lopd@esalto.es or forward it to the sender’s address, and then proceed to delete the e-mail and its attachments without reading them.

In accordance with the regulations on the Protection of Personal Data, we inform you that the personal data collected or generated when you communicate with the data controller, such as the e-mail address and any other information contained therein, will be processed by the data controller for the purpose of handling your request, both within the framework of a business relationship (contractual obligation) or potential relationship, as well as in the event of spontaneous receipt of an e-mail from you (legitimate interest). The data will be retained for as long as the relationship remains in force and thereafter for as long as there are legal or contractual liabilities. You may exercise your rights of access, rectification, deletion, limitation, portability and opposition at this address lopd@esalto.es. For further information, you can review the privacy policy at https://groupsalto.com/en/privacy-policy

5.- Security measures

The responsible party has implemented the appropriate technical and organisational measures to guarantee an adequate level of security, as well as to avoid the loss, misuse, alteration and unauthorised access of the data provided by the user.

6.- Quality and updating of personal data

We inform you that it is obligatory for you to provide us with the personal data we request, as the consequence of not doing so is that we will not be able to process your personal data.

The user is also obliged to ensure that the data provided to the data controller are current, real and true, and therefore to inform the data controller of any update or modification of the same.

If the user communicates personal data of a third party, he/she is obliged to inform the third party beforehand in accordance with the terms of articles 13 and 14 of the GDPR, to obtain his/her prior, express and written consent and to process the data for the purposes authorised by the third party.

The User is solely responsible for any damage or harm caused to the data controller or third parties by the processing of personal data of a third party, or their own personal data when it is false, erroneous, not current, inadequate, excessive or irrelevant.

7.- Under 18 years of age

The contents of this website are intended for people of legal age, so people under 18 years of age are not allowed to provide us with personal data.

8.- Modification of the Data Protection Policy

The responsible party may update or modify the data protection policy at any time, in accordance with the applicable legislation, new jurisprudence or business practice, publishing the modification on this website.

Date of last update: 06/06/2023